Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier: VNZYumPl7CdfRh3Ndxkgz0UxlXDSptHVAACI+aJkLGk=
Subject key identifier: A4:67:3E:CF:97:61:FB:9E:AF:8E:20:66:64:2E:5E:7B:45:BF:C4:2B
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial: 019FA906C65009E0C74BD3C0808D1E92D2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 14:00:21 +0000
Manifest this update: Tue 28 Jul 2026 14:00:21 +0000
Manifest next update: Wed 29 Jul 2026 14:00:21 +0000
Files and hashes: 1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: +SttuHTOOglK32esU/mUsEfr21kQIIidBV8f/B8mk8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c6:50:09:e0:c7:4b:d3:c0:80:8d:1e:92:d2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Validity
Not Before: Jul 28 14:00:21 2026 GMT
Not After : Jul 29 14:00:21 2026 GMT
Subject: CN=a4673ecf9761fb9eaf8e2066642e5e7b45bfc42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:61:52:98:3c:22:8b:29:82:71:2a:e4:b0:
66:6c:df:d4:14:27:b6:da:a9:1b:06:31:ff:c7:c7:
af:a8:a1:50:8d:59:67:d1:61:62:34:38:14:33:13:
d8:e7:36:c8:ce:10:be:a0:67:31:75:e1:77:9b:66:
98:ff:e1:03:83:37:07:78:04:f8:ff:18:93:ff:80:
e5:b1:d2:45:41:bc:b7:a1:17:6e:9a:8b:63:63:88:
32:08:50:b6:e8:43:03:05:8d:f7:42:d0:a2:f4:ca:
0c:1f:db:57:af:f3:f7:6a:00:a8:06:f4:3b:0c:79:
81:ac:4c:fe:a0:16:e9:05:2c:1c:0e:7a:55:b6:a2:
6e:ca:bf:63:aa:89:6e:30:59:7f:f3:2e:cc:36:81:
b0:67:12:ff:ea:ba:7e:97:ea:32:9a:14:b7:db:b9:
7b:44:af:a1:51:79:3c:4d:77:b9:f4:56:7e:32:fb:
92:6d:32:ff:ca:c9:1a:80:d9:12:da:0d:96:d1:5a:
c0:81:84:a6:27:27:31:48:91:33:c1:db:be:72:a2:
46:f4:60:e0:52:24:1c:37:57:92:13:31:a7:de:41:
29:05:2a:31:31:23:0c:08:4b:b7:99:29:79:ef:2a:
22:a5:a2:dc:48:21:aa:3d:90:51:c2:ff:b5:ec:e7:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:3E:CF:97:61:FB:9E:AF:8E:20:66:64:2E:5E:7B:45:BF:C4:2B
X509v3 Authority Key Identifier:
keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:22:d0:08:5c:dd:85:b1:f7:be:43:c5:a6:e2:2e:c7:82:16:
4d:54:f4:dd:42:2f:0e:79:d5:4b:ad:0f:eb:80:60:f7:9f:45:
a6:8f:ba:12:7b:04:d1:7e:46:a9:a8:80:6a:20:7a:0f:bd:25:
44:4d:69:ca:7f:37:56:64:8e:4f:b7:af:a2:57:63:c4:09:89:
c5:35:3d:02:ba:f0:0e:e1:5c:7b:fa:64:1e:21:03:46:af:4d:
4f:dd:a5:6d:32:82:2d:46:9f:ea:52:d2:61:ef:c6:c7:31:20:
b6:75:7c:b0:c9:c0:f9:36:ed:75:41:e8:b7:fc:50:b9:a8:02:
b2:a7:e7:2b:bf:c5:8b:97:a3:cb:c7:42:79:e9:b1:2d:25:81:
be:07:46:b3:6d:38:96:85:8b:8d:90:1c:ea:25:57:50:84:6c:
7c:62:7b:d2:55:7a:cc:e7:df:e9:96:26:db:ba:9c:53:c0:00:
89:c9:54:8a:fc:c5:cf:db:18:d8:83:94:82:54:4b:46:bf:a2:
3a:c4:43:f4:e2:a8:2d:8a:8f:9b:e1:57:3a:39:a8:c4:cf:1b:
9b:e2:73:d5:5a:1f:ad:4b:84:8b:b7:68:01:60:61:fc:51:a7:
2a:1b:8a:42:e4:8f:ce:21:af:a3:a3:0c:b1:0a:41:4a:cd:4e:
5e:b6:1a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBsZQCeDHS9PAgI0ektL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YzRjZDQxMThkZGZmZWU1NmU4ODU2NjM3OTU1NDdhMWRl
M2Y5OGEwHhcNMjYwNzI4MTQwMDIxWhcNMjYwNzI5MTQwMDIxWjAzMTEwLwYDVQQD
EyhhNDY3M2VjZjk3NjFmYjllYWY4ZTIwNjY2NDJlNWU3YjQ1YmZjNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48RhUpg8IospgnEq5LBmbN/UFCe2
2qkbBjH/x8evqKFQjVln0WFiNDgUMxPY5zbIzhC+oGcxdeF3m2aY/+EDgzcHeAT4
/xiT/4DlsdJFQby3oRdumotjY4gyCFC26EMDBY33QtCi9MoMH9tXr/P3agCoBvQ7
DHmBrEz+oBbpBSwcDnpVtqJuyr9jqoluMFl/8y7MNoGwZxL/6rp+l+oymhS327l7
RK+hUXk8TXe59FZ+MvuSbTL/yskagNkS2g2W0VrAgYSmJycxSJEzwdu+cqJG9GDg
UiQcN1eSEzGn3kEpBSoxMSMMCEu3mSl57yoipaLcSCGqPZBRwv+17OeZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRnPs+XYfuer44gZmQuXntFv8QrMB8GA1UdIwQY
MBaAFOnEzUEY3f/uVuiFZjeVVHod4/mKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQt
NmNiMmQzYjQ0MzdjLzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQtNmNiMmQzYjQ0Mzdj
LzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCLQCFzd
hbH3vkPFpuIux4IWTVT03UIvDnnVS60P64Bg959Fpo+6EnsE0X5GqaiAaiB6D70l
RE1pyn83VmSOT7evoldjxAmJxTU9ArrwDuFce/pkHiEDRq9NT92lbTKCLUaf6lLS
Ye/GxzEgtnV8sMnA+TbtdUHot/xQuagCsqfnK7/Fi5ejy8dCeemxLSWBvgdGs204
loWLjZAc6iVXUIRsfGJ70lV6zOff6ZYm27qcU8AAiclUivzFz9sY2IOUglRLRr+i
OsRD9OKoLYqPm+FXOjmoxM8bm+Jz1VofrUuEi7doAWBh/FGnKhuKQuSPziGvo6MM
sQpBSs1OXrYaeQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:21 2026 by rpki-client